$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa File: a17da1ac-b6ea-38cc-babe-f45e1268382c.roa (raw, json) Hash identifier: ILBwtSJagG/QTMVWsce8tRxhgxGlbSsY5ZRMtHVAlOE= Subject key identifier: F9:6D:7A:AA:37:FD:05:F6:5E:83:D1:75:55:6E:F7:91:86:8F:8D:B1 Certificate issuer: /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Certificate serial: 010D0C9F432858489A3B4D77CB337E8D9640D000 Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 20220 IP address blocks: 158.51.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4d:77:cb:33:7e:8d:96:40:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=fe502014-7668-4a72-94b1-77a14850b126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:40:da:cd:f4:06:3b:6b:d9:1f:c6:a8:3a: 83:5b:94:4a:66:4b:4f:99:bf:bc:76:d7:6b:92:37: 3a:7b:62:40:af:0e:75:be:1f:89:98:49:ab:fd:70: 17:2b:37:84:a8:89:f8:cd:78:ad:57:91:95:fa:1e: 18:d4:f4:32:2f:8a:b2:d9:bf:d4:a1:6b:10:48:78: 13:06:d4:b1:c3:92:12:9b:2f:ec:d0:38:84:31:21: 6e:de:31:74:a7:bd:59:3a:6d:1b:f0:b7:0c:0a:0f: 6a:2e:75:e6:ca:48:ad:d2:8a:59:6e:17:bb:95:6f: 77:2e:94:5e:ad:9c:e8:66:41:1d:9c:3f:65:73:c6: 5a:1b:4e:9e:da:20:82:8c:21:c0:59:ad:d3:5a:a9: 1d:41:a6:c4:69:74:a6:6c:93:5a:bf:d1:be:aa:76: a7:f6:07:32:b2:e3:e0:62:b0:ec:3d:43:81:f5:ca: 07:19:fc:ca:89:d5:1d:a8:c6:8b:af:85:2e:06:59: 5b:6a:b7:4b:d9:17:04:0b:38:81:93:c3:7d:99:5b: 2c:f3:91:bb:9d:6f:d0:ee:ba:09:19:79:78:0b:cd: 8f:fd:62:88:a1:f1:dc:89:59:3f:db:d5:ef:2b:88: ff:ed:d2:d1:78:c4:e0:b7:b2:c9:7e:d0:a1:ef:d1: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6D:7A:AA:37:FD:05:F6:5E:83:D1:75:55:6E:F7:91:86:8F:8D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl X509v3 Authority Key Identifier: keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer sbgp-ipAddrBlock: critical IPv4: 158.51.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:97:f5:6a:7a:91:c1:02:2f:45:7f:e5:cc:9b:32:23:25:e8: c0:fa:e3:08:28:26:37:24:b2:8d:3a:5b:2d:2a:8e:06:24:24: d8:7f:18:28:50:ba:df:6f:b1:3f:2a:33:ff:cb:78:23:ca:68: f7:5e:29:68:fa:d3:89:3d:f0:52:f6:c8:e7:a6:5f:70:c8:cf: c0:a3:bb:62:62:d6:0e:3a:7a:2b:69:66:92:20:33:2e:6a:ff: a4:cb:f0:bf:49:45:ba:c2:57:bc:c7:79:de:82:9c:61:a9:5d: a9:54:0a:f8:f9:c8:62:3b:e1:19:c0:ad:f1:03:0e:63:c5:60: f4:21:b1:df:ae:48:95:b6:d6:75:9f:35:c0:ca:cd:1e:07:77: 8d:1a:a5:53:58:0e:4b:bc:94:02:65:6c:f0:45:7b:0d:5e:d1: bf:7c:9d:11:c1:45:a3:6d:1f:60:34:8a:37:07:a1:e0:bb:76: 68:de:43:1f:7e:79:e3:b6:46:d3:16:b8:e9:11:bd:0f:86:34: 43:b8:e9:c5:8c:30:a5:7b:83:53:ec:c8:16:6b:e0:e2:f1:72: 72:58:71:71:2a:e8:19:69:37:59:6a:a7:9d:c6:aa:a5:02:f5: a0:7f:88:70:01:b1:e7:6e:f4:39:36:37:2c:b0:f4:f9:b0:db: 43:1b:bf:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO013yzN+jZZA0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U4MWVkOGMtOTI1MC00OTZiLTlmYzYtMTA3MDFiOTY3 YzViMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZmU1MDIwMTQtNzY2OC00YTcyLTk0YjEtNzdhMTQ4NTBiMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsndA2s30Bjtr2R/GqDqDW5RKZktPmb+8dtdr kjc6e2JArw51vh+JmEmr/XAXKzeEqIn4zXitV5GV+h4Y1PQyL4qy2b/UoWsQSHgT BtSxw5ISmy/s0DiEMSFu3jF0p71ZOm0b8LcMCg9qLnXmykit0opZbhe7lW93LpRe rZzoZkEdnD9lc8ZaG06e2iCCjCHAWa3TWqkdQabEaXSmbJNav9G+qnan9gcysuPg YrDsPUOB9coHGfzKidUdqMaLr4UuBllbardL2RcECziBk8N9mVss85G7nW/Q7roJ GXl4C82P/WKIofHciVk/29XvK4j/7dLReMTgt7LJftCh79FBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlteqo3/QX2XoPRdVVu95GGj42xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgx ZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcwMWI5NjdjNWIvYTE3ZGExYWMtYjZlYS0z OGNjLWJhYmUtZjQ1ZTEyNjgzODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2U4MWVkOGMtOTI1MC00OTZiLTlm YzYtMTA3MDFiOTY3YzViLzdlODFlZDhjLTkyNTAtNDk2Yi05ZmM2LTEwNzAxYjk2 N2M1Yi5jcmwwHwYDVR0jBBgwFoAUJh9ckCEXBboDp20rujcKKNISqkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgxZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcw MWI5NjdjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqX9Wp6kcECL0V/5cybMiMl6MD64wgoJjckso06Wy0qjgYkJNh/GChQ ut9vsT8qM//LeCPKaPdeKWj604k98FL2yOemX3DIz8Cju2Ji1g46eitpZpIgMy5q /6TL8L9JRbrCV7zHed6CnGGpXalUCvj5yGI74RnArfEDDmPFYPQhsd+uSJW21nWf NcDKzR4Hd40apVNYDku8lAJlbPBFew1e0b98nRHBRaNtH2A0ijcHoeC7dmjeQx9+ eeO2RtMWuOkRvQ+GNEO46cWMMKV7g1PsyBZr4OLxcnJYcXEq6BlpN1lqp53GqqUC 9aB/iHABsedu9Dk2Nyyw9Pmw20Mbv3Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:51 2025 by rpki-client